What is Real-Time Bidding?
An automated auction system where your personal data is broadcast to hundreds of advertisers in milliseconds every time you load a webpage — creating the largest data leak most people have never heard of.
Also known as: RTB, Programmatic Advertising, Ad Auction
Every time you visit a webpage with ads, your personal data is broadcast to hundreds of companies in an auction that takes 100 milliseconds. This isn't a hypothetical — it's happening billions of times per day.
How It Works
- You load a webpage
- The site's ad server sends a bid request to an ad exchange
- The bid request contains your data: IP address, location, browsing history, device info, inferred demographics, interests
- The ad exchange broadcasts this data to hundreds of advertisers simultaneously
- Advertisers bid on the right to show you an ad
- The winning advertiser's ad loads — the entire process takes ~100 milliseconds
- All bidders received your data, not just the winner
The Scale
- Hundreds of billions of bid requests per day globally
- Each request broadcasts personal data to 100-300+ companies
- Major exchanges: Google Ad Exchange, Microsoft Xandr, The Trade Desk, Amazon
- Your data is broadcast an estimated 747 times per day per user (Irish Council for Civil Liberties study)
What Data Is Broadcast
- Location: Often precise GPS coordinates from mobile devices
- Browsing history: What sites you've visited (via cookies and tracking pixels)
- Device information: Device type, OS, browser, screen size
- Inferred demographics: Age range, gender, income bracket
- Interest categories: What topics you've shown interest in (health, politics, finance, etc.)
- IAB categories: Standardized labels like "Incest/Abuse Support", "Substance Abuse", "Debt", "Political Beliefs"
Why It's the Biggest Data Leak
- Volume: More data broadcasted than any other system in history
- No consent: Cookie consent banners are the thin legal fiction covering this system
- No security: Bid stream data is routinely resold and used for surveillance
- Government access: Intelligence agencies have purchased RTB data to track individuals without warrants
- Permanent: Once data is broadcast, there's no taking it back
What's Being Done
- IAB Europe TCF deemed GDPR-non-compliant by Belgian DPA (2022)
- Google is slowly deprecating third-party cookies (but replacing them with Topics API)
- ICCL has filed complaints in multiple EU countries
- US Senator Ron Wyden called RTB "the biggest data breach nobody talks about"
How to Protect Yourself
- Use an ad blocker — uBlock Origin blocks ad auction scripts entirely
- Use Brave Browser — Blocks ads and trackers by default
- Use a VPN — Masks your real IP address in bid requests
- Disable third-party cookies — Reduces tracking data available
- Use DNS-level blocking — Pi-hole or NextDNS block ad domains network-wide
- Opt out of ad personalization — On Google, Facebook, and other platforms (limited effectiveness)
Related Terms
Ad Tech Ecosystem
The network of companies, technologies, and data flows that power online advertising — the largest commercial surveillance infrastructure ever built, tracking billions of people across the web.
Cross-Device Tracking
Technologies that link your activity across multiple devices — phone, laptop, tablet, smart TV, and smart speakers — creating a unified identity profile even when you use different browsers, apps, or networks.
Digital Exhaust
The passive trail of data generated by your everyday digital activities — WiFi connections, cell tower pings, Bluetooth broadcasts, DNS queries, and metadata — even when you're not actively using a service or app.
Surveillance Capitalism
An economic system where personal data is systematically collected, analyzed, and sold to predict and influence human behavior for profit.
Have more questions?
Use our guided flow to get the right next privacy step for Real-Time Bidding.
Open Guided Flow